GHSA-r729-mx2r-j26jMedium

Moodle XSS Vulnerability

Published
May 13, 2022
Last Modified
January 17, 2024

🔗 CVE IDs covered (1)

CVE-2011-4306 →

📋 Description

Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

🎯 Affected products1

  • composer/moodle/moodle:< 1.9.14

🔗 References (7)